CVE-2018-18074

Advisory

Pyxnat 1.1.0.0 updates its dependency 'requests' to versions >=2.20 to include security fixes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

---------------

* New Features

- Python 3 compatibility

* Improvements

- Get aliases from a project
- CI tests may now (partially) run within a Docker container
- `ArrayData` class makes no more assumption on data type and use broader/generic types (avoids missing results from other types)
- Specific methods added for MRSessions and MRScans
- Added certification verification to configuration file
- Added test coverage

* Bug fixes

- CI tests run again (partially)
- Fixed vulnerability (upgraded `requests` package version)
- Replaced '\n' newline chars by an OS-agnostic alternative

Resources

• https://pypi.org/project/pyxnat
• https://pyup.io/changelogs/pyxnat/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18074